@shumai-one/shumai-transcode 0.5.3 → 0.6.1

package/bin/chunk-29njhseb.js

@@ -0,0 +1,2 @@
+// @bun
+import{c,a,e,i,o,g,r,l,d,t,m,u,C}from"./chunk-fy14v1v4.js";var{awsEndpointFunctions:De,emitWarningIfUnsupportedVersion:ke,createDefaultUserAgentProvider:$e,NODE_APP_ID_CONFIG_OPTIONS:we,getAwsRegionExtensionConfiguration:Ne,resolveAwsRegionExtensionConfiguration:be,resolveUserAgentConfig:Ue,resolveHostHeaderConfig:Fe,getUserAgentPlugin:qe,getHostHeaderPlugin:He,getLoggerPlugin:Me,getRecursionDetectionPlugin:Ge}=t(),{NoAuthSigner:je,getHttpAuthSchemeEndpointRuleSetPlugin:Ke,DefaultIdentityProviderConfig:Ve,getHttpSigningPlugin:ze}=d(),{normalizeProvider:te,getSmithyContext:Le,ServiceException:Be,NoOpLogger:We,emitWarningIfUnsupportedVersion:Ye,loadConfigsForDefaultMode:Je,getDefaultExtensionConfiguration:Xe,resolveDefaultRuntimeConfig:Qe,Client:re,makeBuilder:Ze,createAggregatedClient:et}=a(),{Command:tt}=a();var Vr=tt,zr=re;var{resolveDefaultsModeConfig:rt,loadConfig:y,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ot,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:nt,NODE_REGION_CONFIG_OPTIONS:st,NODE_REGION_CONFIG_FILE_OPTIONS:it,resolveRegionConfig:ct}=e(),{BinaryDecisionDiagram:at,EndpointCache:pt,decideEndpoint:dt,customEndpointFunctions:ut,resolveEndpointConfig:lt,getEndpointPlugin:ht}=i(),{parseUrl:_t,getHttpHandlerExtensionConfiguration:gt,resolveHttpHandlerRuntimeConfig:Et,getContentLengthPlugin:mt}=r(),{DEFAULT_RETRY_MODE:xt,NODE_RETRY_MODE_CONFIG_OPTIONS:ft,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:St,resolveRetryConfig:vt,getRetryPlugin:Pt}=l(),{TypeRegistry:oe,getSchemaSerdePlugin:It}=c(),{resolveAwsSdkSigV4Config:Ct,AwsSdkSigV4Signer:At,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:yt}=u(),{toUtf8:Tt,fromUtf8:Ot,toBase64:Rt,fromBase64:Dt,calculateBodyLength:kt}=o(),{streamCollector:$t,NodeHttpHandler:wt}=C(),{AwsRestJsonProtocol:Nt}=m(),{Sha256:bt}=g(),Ut=async(n,s,_)=>({operation:Le(s).operation,region:await te(n.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Ft(n){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:n.region},propertiesExtractor:(s,_)=>({signingProperties:{config:s,context:_}})}}function qt(n){return{schemeId:"smithy.api#noAuth"}}var Ht=(n)=>{let s=[];switch(n.operation){case"CreateToken":{s.push(qt());break}default:s.push(Ft(n))}return s},Mt=(n)=>{let s=Ct(n);return Object.assign(s,{authSchemePreference:te(n.authSchemePreference??[])})},Gt=(n)=>Object.assign(n,{useDualstackEndpoint:n.useDualstackEndpoint??!1,useFipsEndpoint:n.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}),jt={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Kt="3.997.43",Vt={version:Kt},R="ref",T=-1,k=!0,X="isSet",ne="PartitionResult",w="booleanEquals",L="getAttr",Q={[R]:"Endpoint"},B={[R]:ne},O={},Z=[{[R]:"Region"}],ee={conditions:[[X,[Q]],[X,Z],["aws.partition",Z,ne],[w,[{[R]:"UseFIPS"},k]],[w,[{[R]:"UseDualStack"},k]],[w,[{fn:L,argv:[B,"supportsDualStack"]},k]],[w,[{fn:L,argv:[B,"supportsFIPS"]},k]],["stringEquals",[{fn:L,argv:[B,"name"]},"aws-us-gov"]]],results:[[T],[T,"Invalid Configuration: FIPS and custom endpoint are not supported"],[T,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Q,O],["https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",O],[T,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://oidc.{Region}.amazonaws.com",O],["https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",O],[T,"FIPS is enabled but this partition does not support FIPS"],["https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",O],[T,"DualStack is enabled but this partition does not support DualStack"],["https://oidc.{Region}.{PartitionResult#dnsSuffix}",O],[T,"Invalid Configuration: Missing Region"]]},zt=2,f=1e8,Lt=new Int32Array([-1,1,-1,0,13,3,1,4,f+12,2,5,f+12,3,8,6,4,7,f+11,5,f+9,f+10,4,11,9,6,10,f+8,7,f+6,f+7,5,12,f+5,6,f+4,f+5,3,f+1,14,4,f+2,f+3]),Bt=at.from(Lt,zt,ee.conditions,ee.results),Wt=new pt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Yt=(n,s={})=>Wt.get(n,()=>dt(Bt,{endpointParams:n,logger:s.logger}));ut.aws=De;class x extends Be{constructor(n){super(n);Object.setPrototypeOf(this,x.prototype)}}class N extends x{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(n){super({name:"AccessDeniedException",$fault:"client",...n});Object.setPrototypeOf(this,N.prototype),this.error=n.error,this.reason=n.reason,this.error_description=n.error_description}}class b extends x{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(n){super({name:"AuthorizationPendingException",$fault:"client",...n});Object.setPrototypeOf(this,b.prototype),this.error=n.error,this.error_description=n.error_description}}class U extends x{name="ExpiredTokenException";$fault="client";error;error_description;constructor(n){super({name:"ExpiredTokenException",$fault:"client",...n});Object.setPrototypeOf(this,U.prototype),this.error=n.error,this.error_description=n.error_description}}class F extends x{name="InternalServerException";$fault="server";error;error_description;constructor(n){super({name:"InternalServerException",$fault:"server",...n});Object.setPrototypeOf(this,F.prototype),this.error=n.error,this.error_description=n.error_description}}class q extends x{name="InvalidClientException";$fault="client";error;error_description;constructor(n){super({name:"InvalidClientException",$fault:"client",...n});Object.setPrototypeOf(this,q.prototype),this.error=n.error,this.error_description=n.error_description}}class H extends x{name="InvalidGrantException";$fault="client";error;error_description;constructor(n){super({name:"InvalidGrantException",$fault:"client",...n});Object.setPrototypeOf(this,H.prototype),this.error=n.error,this.error_description=n.error_description}}class M extends x{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(n){super({name:"InvalidRequestException",$fault:"client",...n});Object.setPrototypeOf(this,M.prototype),this.error=n.error,this.reason=n.reason,this.error_description=n.error_description}}class G extends x{name="InvalidScopeException";$fault="client";error;error_description;constructor(n){super({name:"InvalidScopeException",$fault:"client",...n});Object.setPrototypeOf(this,G.prototype),this.error=n.error,this.error_description=n.error_description}}class j extends x{name="SlowDownException";$fault="client";error;error_description;constructor(n){super({name:"SlowDownException",$fault:"client",...n});Object.setPrototypeOf(this,j.prototype),this.error=n.error,this.error_description=n.error_description}}class K extends x{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(n){super({name:"UnauthorizedClientException",$fault:"client",...n});Object.setPrototypeOf(this,K.prototype),this.error=n.error,this.error_description=n.error_description}}class V extends x{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(n){super({name:"UnsupportedGrantTypeException",$fault:"client",...n});Object.setPrototypeOf(this,V.prototype),this.error=n.error,this.error_description=n.error_description}}var Jt="AccessDeniedException",Xt="AuthorizationPendingException",Qt="AccessToken",Zt="ClientSecret",er="CreateToken",tr="CreateTokenRequest",rr="CreateTokenResponse",or="CodeVerifier",nr="ExpiredTokenException",sr="InvalidClientException",ir="InvalidGrantException",cr="InvalidRequestException",ar="InternalServerException",pr="InvalidScopeException",dr="IdToken",ur="RefreshToken",lr="SlowDownException",hr="UnauthorizedClientException",_r="UnsupportedGrantTypeException",gr="accessToken",A="client",Er="clientId",mr="clientSecret",xr="codeVerifier",fr="code",Sr="deviceCode",p="error",vr="expiresIn",P="error_description",Pr="grantType",Ir="http",I="httpError",Cr="idToken",se="reason",ie="refreshToken",Ar="redirectUri",ce="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",yr="scope",Tr="server",Or="tokenType",h="com.amazonaws.ssooidc",ae=oe.for(ce),pe=[-3,ce,"SSOOIDCServiceException",0,[],[]];ae.registerError(pe,x);var S=oe.for(h),de=[-3,h,Jt,{[p]:A,[I]:400},[p,se,P],[0,0,0]];S.registerError(de,N);var ue=[-3,h,Xt,{[p]:A,[I]:400},[p,P],[0,0]];S.registerError(ue,b);var le=[-3,h,nr,{[p]:A,[I]:400},[p,P],[0,0]];S.registerError(le,U);var he=[-3,h,ar,{[p]:Tr,[I]:500},[p,P],[0,0]];S.registerError(he,F);var _e=[-3,h,sr,{[p]:A,[I]:401},[p,P],[0,0]];S.registerError(_e,q);var ge=[-3,h,ir,{[p]:A,[I]:400},[p,P],[0,0]];S.registerError(ge,H);var Ee=[-3,h,cr,{[p]:A,[I]:400},[p,se,P],[0,0,0]];S.registerError(Ee,M);var me=[-3,h,pr,{[p]:A,[I]:400},[p,P],[0,0]];S.registerError(me,G);var xe=[-3,h,lr,{[p]:A,[I]:400},[p,P],[0,0]];S.registerError(xe,j);var fe=[-3,h,hr,{[p]:A,[I]:400},[p,P],[0,0]];S.registerError(fe,K);var Se=[-3,h,_r,{[p]:A,[I]:400},[p,P],[0,0]];S.registerError(Se,V);var ve=[ae,S],Rr=[0,h,Qt,8,0],Dr=[0,h,Zt,8,0],kr=[0,h,or,8,0],$r=[0,h,dr,8,0],Pe=[0,h,ur,8,0],Ie=[3,h,tr,0,[Er,mr,Pr,Sr,fr,ie,yr,Ar,xr],[0,[()=>Dr,0],0,0,0,[()=>Pe,0],64,0,[()=>kr,0]],3],Ce=[3,h,rr,0,[gr,Or,vr,ie,Cr],[[()=>Rr,0],0,1,[()=>Pe,0],[()=>$r,0]]],Ae=[9,h,er,{[Ir]:["POST","/token",200]},()=>Ie,()=>Ce],wr=(n)=>({apiVersion:"2019-06-10",base64Decoder:n?.base64Decoder??Dt,base64Encoder:n?.base64Encoder??Rt,disableHostPrefix:n?.disableHostPrefix??!1,endpointProvider:n?.endpointProvider??Yt,extensions:n?.extensions??[],httpAuthSchemeProvider:n?.httpAuthSchemeProvider??Ht,httpAuthSchemes:n?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(s)=>s.getIdentityProvider("aws.auth#sigv4"),signer:new At},{schemeId:"smithy.api#noAuth",identityProvider:(s)=>s.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new je}],logger:n?.logger??new We,protocol:n?.protocol??Nt,protocolSettings:n?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:ve,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:n?.serviceId??"SSO OIDC",sha256:n?.sha256??bt,urlParser:n?.urlParser??_t,utf8Decoder:n?.utf8Decoder??Ot,utf8Encoder:n?.utf8Encoder??Tt}),Nr=(n)=>{Ye(process.version);let s=rt(n),_=()=>s().then(Je),v=wr(n);ke(process.version);let E={profile:n?.profile,logger:v.logger};return{...v,...n,runtime:"node",defaultsMode:s,authSchemePreference:n?.authSchemePreference??y(yt,E),bodyLengthChecker:n?.bodyLengthChecker??kt,defaultUserAgentProvider:n?.defaultUserAgentProvider??$e({serviceId:v.serviceId,clientVersion:Vt.version}),maxAttempts:n?.maxAttempts??y(St,n),region:n?.region??y(st,{...it,...E}),requestHandler:wt.create(n?.requestHandler??_),retryMode:n?.retryMode??y({...ft,default:async()=>(await _()).retryMode||xt},n),streamCollector:n?.streamCollector??$t,useDualstackEndpoint:n?.useDualstackEndpoint??y(nt,E),useFipsEndpoint:n?.useFipsEndpoint??y(ot,E),userAgentAppId:n?.userAgentAppId??y(we,E)}},br=(n)=>{let{httpAuthSchemes:s,httpAuthSchemeProvider:_,credentials:v}=n;return{setHttpAuthScheme(E){let D=s.findIndex((z)=>z.schemeId===E.schemeId);if(D===-1)s.push(E);else s.splice(D,1,E)},httpAuthSchemes(){return s},setHttpAuthSchemeProvider(E){_=E},httpAuthSchemeProvider(){return _},setCredentials(E){v=E},credentials(){return v}}},Ur=(n)=>({httpAuthSchemes:n.httpAuthSchemes(),httpAuthSchemeProvider:n.httpAuthSchemeProvider(),credentials:n.credentials()}),Fr=(n,s)=>{let _=Object.assign(Ne(n),Xe(n),gt(n),br(n));return s.forEach((v)=>v.configure(_)),Object.assign(n,be(_),Qe(_),Et(_),Ur(_))};class W extends re{config;constructor(...[n]){let s=Nr(n||{});super(s);this.initConfig=s;let _=Gt(s),v=Ue(_),E=vt(v),D=ct(E),z=Fe(D),ye=lt(z),Te=Mt(ye),Oe=Fr(Te,n?.extensions||[]);this.config=Oe,this.middlewareStack.use(It(this.config)),this.middlewareStack.use(qe(this.config)),this.middlewareStack.use(Pt(this.config)),this.middlewareStack.use(mt(this.config)),this.middlewareStack.use(He(this.config)),this.middlewareStack.use(Me(this.config)),this.middlewareStack.use(Ge(this.config)),this.middlewareStack.use(Ke(this.config,{httpAuthSchemeParametersProvider:Ut,identityProviderConfigProvider:async(Re)=>new Ve({"aws.auth#sigv4":Re.credentials})})),this.middlewareStack.use(ze(this.config))}destroy(){super.destroy()}}var qr=Ze(jt,"AWSSSOOIDCService","SSOOIDCClient",ht),Hr={},Mr=(n,s,_,v)=>[];class Y extends qr(Hr,Mr,"CreateToken",Ae){}var Gr={CreateTokenCommand:Y};class J extends W{}et(Gr,J);var jr={KMS_ACCESS_DENIED:"KMS_AccessDeniedException"},Kr={KMS_DISABLED_KEY:"KMS_DisabledException",KMS_INVALID_KEY_USAGE:"KMS_InvalidKeyUsageException",KMS_INVALID_STATE:"KMS_InvalidStateException",KMS_KEY_NOT_FOUND:"KMS_NotFoundException"};var Lr=N,Br=de,Wr=jr,Yr=b,Jr=ue,Xr=Ae,Qr=Y,Zr=Ie,eo=Ce,to=U,ro=le,oo=F,no=he,so=q,io=_e,co=H,ao=ge,po=M,uo=Ee,lo=Kr,ho=G,_o=me,go=J,Eo=W,mo=x,xo=pe,fo=j,So=xe,vo=K,Po=fe,Io=V,Co=Se,Ao=ve;export{Vr as $Command,zr as __Client,Lr as AccessDeniedException,Br as AccessDeniedException$,Wr as AccessDeniedExceptionReason,Yr as AuthorizationPendingException,Jr as AuthorizationPendingException$,Xr as CreateToken$,Qr as CreateTokenCommand,Zr as CreateTokenRequest$,eo as CreateTokenResponse$,to as ExpiredTokenException,ro as ExpiredTokenException$,oo as InternalServerException,no as InternalServerException$,so as InvalidClientException,io as InvalidClientException$,co as InvalidGrantException,ao as InvalidGrantException$,po as InvalidRequestException,uo as InvalidRequestException$,lo as InvalidRequestExceptionReason,ho as InvalidScopeException,_o as InvalidScopeException$,go as SSOOIDC,Eo as SSOOIDCClient,mo as SSOOIDCServiceException,xo as SSOOIDCServiceException$,fo as SlowDownException,So as SlowDownException$,vo as UnauthorizedClientException,Po as UnauthorizedClientException$,Io as UnsupportedGrantTypeException,Co as UnsupportedGrantTypeException$,Ao as errorTypeRegistries};

package/bin/chunk-2dm2ka6t.js

@@ -0,0 +1,7 @@
+// @bun
+import{A,e,o,r,t,C}from"./chunk-fy14v1v4.js";var y=A(t()),h=A(e()),v=A(C());import F from"fs/promises";var I=A(e());var H="169.254.170.2",K="169.254.170.23",P="[fd00:ec2::23]",u=(n,i)=>{if(n.protocol==="https:")return;if(n.hostname===H||n.hostname===K||n.hostname===P)return;if(n.hostname.includes("[")){if(n.hostname==="[::1]"||n.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(n.hostname==="localhost")return;let c=n.hostname.split("."),a=(s)=>{let d=parseInt(s,10);return 0<=d&&d<=255};if(c[0]==="127"&&a(c[1])&&a(c[2])&&a(c[3])&&c.length===4)return}throw new I.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
+  - loopback CIDR 127.0.0.0/8 or [::1/128]
+  - ECS container host 169.254.170.2
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:i})};var T=A(e()),E=A(r()),N=A(o()),w=A(o());function R(n){return new E.HttpRequest({protocol:n.protocol,hostname:n.hostname,port:Number(n.port),path:n.pathname,query:Array.from(n.searchParams.entries()).reduce((i,[c,a])=>(i[c]=a,i),{}),fragment:n.hash})}async function g(n,i){let a=await w.sdkStreamMixin(n.body).transformToString();if(n.statusCode===200){let s=JSON.parse(a);if(typeof s.AccessKeyId!=="string"||typeof s.SecretAccessKey!=="string"||typeof s.Token!=="string"||typeof s.Expiration!=="string")throw new T.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:i});return{accessKeyId:s.AccessKeyId,secretAccessKey:s.SecretAccessKey,sessionToken:s.Token,expiration:N.parseRfc3339DateTime(s.Expiration)}}if(n.statusCode>=400&&n.statusCode<500){let s={};try{s=JSON.parse(a)}catch(d){}throw Object.assign(new T.CredentialsProviderError(`Server responded with status: ${n.statusCode}`,{logger:i}),{Code:s.Code,Message:s.Message})}throw new T.CredentialsProviderError(`Server responded with status: ${n.statusCode}`,{logger:i})}var S=(n,i,c)=>async()=>{for(let a=0;a<i;++a)try{return await n()}catch(s){await new Promise((d)=>setTimeout(d,c))}return await n()};var x="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",D="http://169.254.170.2",W="AWS_CONTAINER_CREDENTIALS_FULL_URI",b="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",q="AWS_CONTAINER_AUTHORIZATION_TOKEN",z=(n={})=>{n.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let i,c=n.awsContainerCredentialsRelativeUri??process.env[x],a=n.awsContainerCredentialsFullUri??process.env[W],s=n.awsContainerAuthorizationToken??process.env[q],d=n.awsContainerAuthorizationTokenFile??process.env[b],m=n.logger?.constructor?.name==="NoOpLogger"||!n.logger?.warn?console.warn:n.logger.warn.bind(n.logger);if(c&&a)m("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),m("awsContainerCredentialsRelativeUri will take precedence.");if(s&&d)m("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),m("awsContainerAuthorizationTokenFile will take precedence.");if(c)i=`${D}${c}`;else if(a)i=a;else throw new h.CredentialsProviderError(`No HTTP credential provider host provided.
+Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:n.logger});let _=new URL(i);u(_,n.logger);let f=v.NodeHttpHandler.create({connectionTimeout:n.timeout??1000}),L=n.timeout??1000,U=S(async()=>{let l=R(_);if(d)l.headers.Authorization=O((await F.readFile(d)).toString());else if(s)l.headers.Authorization=O(s);try{let p=await f.handle(l,{requestTimeout:L});return g(p.response).then((k)=>y.setCredentialFeature(k,"CREDENTIALS_HTTP","z"))}catch(p){throw new h.CredentialsProviderError(String(p),{logger:n.logger})}},n.maxRetries??3,n.timeout??1000);return async()=>{try{return await U()}finally{f.destroy?.()}}},O=(n)=>{if(n.includes(`\r
+`))throw new h.CredentialsProviderError("Authorization token contains invalid \\r\\n sequence.");return n};export{z as fromHttp};

package/bin/chunk-4yv0xe5h.js

@@ -0,0 +1,2 @@
+// @bun
+import{c,a,e,i,o,g,r,l,d,t,p,m,u,C}from"./chunk-fy14v1v4.js";var{awsEndpointFunctions:At,emitWarningIfUnsupportedVersion:Et,createDefaultUserAgentProvider:vt,NODE_APP_ID_CONFIG_OPTIONS:yt,getAwsRegionExtensionConfiguration:It,resolveAwsRegionExtensionConfiguration:Rt,resolveUserAgentConfig:_t,resolveHostHeaderConfig:Ct,getUserAgentPlugin:xt,getHostHeaderPlugin:wt,getLoggerPlugin:Tt,getRecursionDetectionPlugin:Dt,setCredentialFeature:ce,stsRegionDefaultResolver:bt}=t(),{NoAuthSigner:_e,getHttpAuthSchemeEndpointRuleSetPlugin:$t,DefaultIdentityProviderConfig:kt,getHttpSigningPlugin:Ot}=d(),{normalizeProvider:Ce,getSmithyContext:xe,ServiceException:Nt,NoOpLogger:Wt,emitWarningIfUnsupportedVersion:Ht,loadConfigsForDefaultMode:Ut,getDefaultExtensionConfiguration:qt,resolveDefaultRuntimeConfig:Ft,Client:we,makeBuilder:Lt,createAggregatedClient:Kt}=a(),{Command:Mt}=a();var jn=Mt,Gn=we;var{resolveDefaultsModeConfig:jt,loadConfig:O,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:Gt,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:Vt,NODE_REGION_CONFIG_OPTIONS:zt,NODE_REGION_CONFIG_FILE_OPTIONS:Bt,resolveRegionConfig:Qt}=e(),{BinaryDecisionDiagram:Yt,EndpointCache:Xt,decideEndpoint:Jt,customEndpointFunctions:Zt,resolveParams:es,resolveEndpointConfig:ts,getEndpointPlugin:ss}=i(),{parseUrl:ns,getHttpHandlerExtensionConfiguration:os,resolveHttpHandlerRuntimeConfig:rs,getContentLengthPlugin:is}=r(),{DEFAULT_RETRY_MODE:as,NODE_RETRY_MODE_CONFIG_OPTIONS:cs,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:us,resolveRetryConfig:ds,getRetryPlugin:ls}=l(),{TypeRegistry:Te,getSchemaSerdePlugin:ps}=c(),{resolveAwsSdkSigV4Config:gs,resolveAwsSdkSigV4AConfig:hs,AwsSdkSigV4Signer:De,AwsSdkSigV4ASigner:be,NODE_SIGV4A_CONFIG_OPTIONS:ms,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ps}=u(),{SignatureV4MultiRegion:$e}=p(),{toUtf8:fs,fromUtf8:Ss,toBase64:As,fromBase64:Es,calculateBodyLength:vs}=o(),{streamCollector:ys,NodeHttpHandler:Is}=C(),{AwsQueryProtocol:Rs}=m(),{Sha256:_s}=g(),G="ref",H=-1,V=!0,fe="isSet",ke="PartitionResult",z="booleanEquals",y="stringEquals",ie="getAttr",Se="us-east-1",Ae="sigv4",Ee="sts",ve="https://sts.{Region}.{PartitionResult#dnsSuffix}",ye={[G]:"Endpoint"},I={[G]:"Region"},ae={[G]:ke},j={},Ie=[I],Re={conditions:[[fe,[ye]],[fe,Ie],["aws.partition",Ie,ke],[z,[{[G]:"UseFIPS"},V]],[z,[{[G]:"UseDualStack"},V]],[y,[I,"aws-global"]],[z,[{[G]:"UseGlobalEndpoint"},V]],[y,[I,"eu-central-1"]],[z,[{fn:ie,argv:[ae,"supportsDualStack"]},V]],[z,[{fn:ie,argv:[ae,"supportsFIPS"]},V]],[y,[I,"ap-south-1"]],[y,[I,"eu-north-1"]],[y,[I,"eu-west-1"]],[y,[I,"eu-west-2"]],[y,[I,"eu-west-3"]],[y,[I,"sa-east-1"]],[y,[I,Se]],[y,[I,"us-east-2"]],[y,[I,"us-west-2"]],[y,[I,"us-west-1"]],[y,[I,"ca-central-1"]],[y,[I,"ap-southeast-1"]],[y,[I,"ap-northeast-1"]],[y,[I,"ap-southeast-2"]],[y,[{fn:ie,argv:[ae,"name"]},"aws-us-gov"]]],results:[[H],["https://sts.amazonaws.com",{authSchemes:[{name:Ae,signingName:Ee,signingRegion:Se}]}],[ve,{authSchemes:[{name:Ae,signingName:Ee,signingRegion:"{Region}"}]}],[H,"Invalid Configuration: FIPS and custom endpoint are not supported"],[H,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ye,j],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",j],[H,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",j],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",j],[H,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",j],[H,"DualStack is enabled but this partition does not support DualStack"],[ve,j],[H,"Invalid Configuration: Missing Region"]]},Cs=2,f=1e8,xs=new Int32Array([-1,1,-1,0,30,3,1,4,f+14,2,5,f+14,3,25,6,4,24,7,5,f+1,8,6,9,f+13,7,f+1,10,10,f+1,11,11,f+1,12,12,f+1,13,13,f+1,14,14,f+1,15,15,f+1,16,16,f+1,17,17,f+1,18,18,f+1,19,19,f+1,20,20,f+1,21,21,f+1,22,22,f+1,23,23,f+1,f+2,8,f+11,f+12,4,28,26,9,27,f+10,24,f+8,f+9,8,29,f+7,9,f+6,f+7,3,f+3,31,4,f+4,f+5]),ws=Yt.from(xs,Cs,Re.conditions,Re.results),Ts=new Xt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Oe=(s,n={})=>Ts.get(s,()=>Jt(ws,{endpointParams:s,logger:n.logger}));Zt.aws=At;var Ds=(s)=>async(n,h,A)=>{if(!A)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let P=await s(n,h,A),v=xe(h)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!v)throw Error(`getEndpointParameterInstructions() is not defined on '${h.commandName}'`);let S=await es(A,{getEndpointParameterInstructions:v},n);return Object.assign(P,S)},bs=async(s,n,h)=>({operation:xe(n).operation,region:await Ce(s.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),$s=Ds(bs);function Ne(s){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:s.region},propertiesExtractor:(n,h)=>({signingProperties:{config:n,context:h}})}}function ue(s){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:s.region},propertiesExtractor:(n,h)=>({signingProperties:{config:n,context:h}})}}function We(s){return{schemeId:"smithy.api#noAuth"}}var ks=(s,n,h)=>(P)=>{let S=s(P).properties?.authSchemes;if(!S)return n(P);let R=[];for(let T of S){let{name:_,properties:D={},...W}=T,b=_.toLowerCase();if(_!==b)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${_}' to '${b}'`);let w;if(b==="sigv4a"){w="aws.auth#sigv4a";let oe=S.find((re)=>{let Pe=re.name.toLowerCase();return Pe!=="sigv4a"&&Pe.startsWith("sigv4")});if($e.sigv4aDependency()==="none"&&oe)continue}else if(b.startsWith("sigv4"))w="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${b}'`);let M=h[w];if(!M)throw Error(`Could not find HttpAuthOption create function for '${w}'`);let k=M(P);k.schemeId=w,k.signingProperties={...k.signingProperties||{},...W,...D},R.push(k)}return R},Os=(s)=>{let n=[];switch(s.operation){case"AssumeRoleWithWebIdentity":{n.push(We()),n.push(ue(s));break}default:n.push(Ne(s)),n.push(ue(s))}return n},Ns=ks(Oe,Os,{"aws.auth#sigv4":Ne,"aws.auth#sigv4a":ue,"smithy.api#noAuth":We}),Ws=(s)=>{let n=gs(s),h=hs(n);return Object.assign(h,{authSchemePreference:Ce(s.authSchemePreference??[])})},Hs=(s)=>Object.assign(s,{useDualstackEndpoint:s.useDualstackEndpoint??!1,useFipsEndpoint:s.useFipsEndpoint??!1,useGlobalEndpoint:s.useGlobalEndpoint??!1,defaultSigningName:"sts"}),Us={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},qs="3.997.43",Fs={version:qs};class x extends Nt{constructor(s){super(s);Object.setPrototypeOf(this,x.prototype)}}class Q extends x{name="ExpiredTokenException";$fault="client";constructor(s){super({name:"ExpiredTokenException",$fault:"client",...s});Object.setPrototypeOf(this,Q.prototype)}}class Y extends x{name="MalformedPolicyDocumentException";$fault="client";constructor(s){super({name:"MalformedPolicyDocumentException",$fault:"client",...s});Object.setPrototypeOf(this,Y.prototype)}}class X extends x{name="PackedPolicyTooLargeException";$fault="client";constructor(s){super({name:"PackedPolicyTooLargeException",$fault:"client",...s});Object.setPrototypeOf(this,X.prototype)}}class J extends x{name="RegionDisabledException";$fault="client";constructor(s){super({name:"RegionDisabledException",$fault:"client",...s});Object.setPrototypeOf(this,J.prototype)}}class Z extends x{name="IDPRejectedClaimException";$fault="client";constructor(s){super({name:"IDPRejectedClaimException",$fault:"client",...s});Object.setPrototypeOf(this,Z.prototype)}}class ee extends x{name="InvalidIdentityTokenException";$fault="client";constructor(s){super({name:"InvalidIdentityTokenException",$fault:"client",...s});Object.setPrototypeOf(this,ee.prototype)}}class te extends x{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(s){super({name:"IDPCommunicationErrorException",$fault:"client",...s});Object.setPrototypeOf(this,te.prototype)}}var Ls="Arn",Ks="AccessKeyId",Ms="AssumeRole",js="AssumedRoleId",Gs="AssumeRoleRequest",Vs="AssumeRoleResponse",de="AssumedRoleUser",zs="AssumeRoleWithWebIdentity",Bs="AssumeRoleWithWebIdentityRequest",Qs="AssumeRoleWithWebIdentityResponse",Ys="Audience",le="Credentials",Xs="ContextAssertion",He="DurationSeconds",Js="Expiration",Zs="ExternalId",en="ExpiredTokenException",tn="IDPCommunicationErrorException",sn="IDPRejectedClaimException",nn="InvalidIdentityTokenException",on="Key",rn="MalformedPolicyDocumentException",Ue="Policy",qe="PolicyArns",an="ProviderArn",cn="ProvidedContexts",un="ProvidedContextsListType",dn="ProvidedContext",ln="PolicyDescriptorType",pn="ProviderId",Fe="PackedPolicySize",gn="PackedPolicyTooLargeException",hn="Provider",Le="RoleArn",mn="RegionDisabledException",Ke="RoleSessionName",Pn="SecretAccessKey",fn="SubjectFromWebIdentityToken",pe="SourceIdentity",Sn="SerialNumber",An="SessionToken",En="Tags",vn="TokenCode",yn="TransitiveTagKeys",In="Tag",Rn="Value",_n="WebIdentityToken",Cn="arn",xn="accessKeySecretType",U="awsQueryError",q="client",wn="clientTokenType",F="error",L="httpError",K="message",Tn="policyDescriptorListType",Me="smithy.ts.sdk.synthetic.com.amazonaws.sts",Dn="tagListType",E="com.amazonaws.sts",je=Te.for(Me),Ge=[-3,Me,"STSServiceException",0,[],[]];je.registerError(Ge,x);var N=Te.for(E),Ve=[-3,E,en,{[U]:["ExpiredTokenException",400],[F]:q,[L]:400},[K],[0]];N.registerError(Ve,Q);var ze=[-3,E,tn,{[U]:["IDPCommunicationError",400],[F]:q,[L]:400},[K],[0]];N.registerError(ze,te);var Be=[-3,E,sn,{[U]:["IDPRejectedClaim",403],[F]:q,[L]:403},[K],[0]];N.registerError(Be,Z);var Qe=[-3,E,nn,{[U]:["InvalidIdentityToken",400],[F]:q,[L]:400},[K],[0]];N.registerError(Qe,ee);var Ye=[-3,E,rn,{[U]:["MalformedPolicyDocument",400],[F]:q,[L]:400},[K],[0]];N.registerError(Ye,Y);var Xe=[-3,E,gn,{[U]:["PackedPolicyTooLarge",400],[F]:q,[L]:400},[K],[0]];N.registerError(Xe,X);var Je=[-3,E,mn,{[U]:["RegionDisabledException",403],[F]:q,[L]:403},[K],[0]];N.registerError(Je,J);var Ze=[je,N],bn=[0,E,xn,8,0],$n=[0,E,wn,8,0],ge=[3,E,de,0,[js,Ls],[0,0],2],et=[3,E,Gs,0,[Le,Ke,qe,Ue,He,En,yn,Zs,Sn,vn,pe,cn],[0,0,()=>at,0,1,()=>On,64,0,0,0,0,()=>kn],2],tt=[3,E,Vs,0,[le,de,Fe,pe],[[()=>he,0],()=>ge,1,0]],st=[3,E,Bs,0,[Le,Ke,_n,pn,qe,Ue,He],[0,0,[()=>$n,0],0,()=>at,0,1],3],nt=[3,E,Qs,0,[le,fn,de,Fe,hn,Ys,pe],[[()=>he,0],0,()=>ge,1,0,0,0]],he=[3,E,le,0,[Ks,Pn,An,Js],[0,[()=>bn,0],0,4],4],ot=[3,E,ln,0,[Cn],[0]],rt=[3,E,dn,0,[an,Xs],[0,0]],it=[3,E,In,0,[on,Rn],[0,0],2],at=[1,E,Tn,0,()=>ot],kn=[1,E,un,0,()=>rt],On=[1,E,Dn,0,()=>it],ct=[9,E,Ms,0,()=>et,()=>tt],ut=[9,E,zs,0,()=>st,()=>nt],Nn=(s)=>({apiVersion:"2011-06-15",base64Decoder:s?.base64Decoder??Es,base64Encoder:s?.base64Encoder??As,disableHostPrefix:s?.disableHostPrefix??!1,endpointProvider:s?.endpointProvider??Oe,extensions:s?.extensions??[],httpAuthSchemeProvider:s?.httpAuthSchemeProvider??Ns,httpAuthSchemes:s?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(n)=>n.getIdentityProvider("aws.auth#sigv4"),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(n)=>n.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(n)=>n.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],logger:s?.logger??new Wt,protocol:s?.protocol??Rs,protocolSettings:s?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:Ze,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:s?.serviceId??"STS",sha256:s?.sha256??_s,signerConstructor:s?.signerConstructor??$e,urlParser:s?.urlParser??ns,utf8Decoder:s?.utf8Decoder??Ss,utf8Encoder:s?.utf8Encoder??fs}),Wn=(s)=>{Ht(process.version);let n=jt(s),h=()=>n().then(Ut),A=Nn(s);Et(process.version);let P={profile:s?.profile,logger:A.logger};return{...A,...s,runtime:"node",defaultsMode:n,authSchemePreference:s?.authSchemePreference??O(Ps,P),bodyLengthChecker:s?.bodyLengthChecker??vs,defaultUserAgentProvider:s?.defaultUserAgentProvider??vt({serviceId:A.serviceId,clientVersion:Fs.version}),httpAuthSchemes:s?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(v)=>v.getIdentityProvider("aws.auth#sigv4")||(async(S)=>await s.credentialDefaultProvider(S?.__config||{})()),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(v)=>v.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(v)=>v.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],maxAttempts:s?.maxAttempts??O(us,s),region:s?.region??O(zt,{...Bt,...P}),requestHandler:Is.create(s?.requestHandler??h),retryMode:s?.retryMode??O({...cs,default:async()=>(await h()).retryMode||as},s),sigv4aSigningRegionSet:s?.sigv4aSigningRegionSet??O(ms,P),streamCollector:s?.streamCollector??ys,useDualstackEndpoint:s?.useDualstackEndpoint??O(Vt,P),useFipsEndpoint:s?.useFipsEndpoint??O(Gt,P),userAgentAppId:s?.userAgentAppId??O(yt,P)}},Hn=(s)=>{let{httpAuthSchemes:n,httpAuthSchemeProvider:h,credentials:A}=s;return{setHttpAuthScheme(P){let v=n.findIndex((S)=>S.schemeId===P.schemeId);if(v===-1)n.push(P);else n.splice(v,1,P)},httpAuthSchemes(){return n},setHttpAuthSchemeProvider(P){h=P},httpAuthSchemeProvider(){return h},setCredentials(P){A=P},credentials(){return A}}},Un=(s)=>({httpAuthSchemes:s.httpAuthSchemes(),httpAuthSchemeProvider:s.httpAuthSchemeProvider(),credentials:s.credentials()}),qn=(s,n)=>{let h=Object.assign(It(s),qt(s),os(s),Hn(s));return n.forEach((A)=>A.configure(h)),Object.assign(s,Rt(h),Ft(h),rs(h),Un(h))};class B extends we{config;constructor(...[s]){let n=Wn(s||{});super(n);this.initConfig=n;let h=Hs(n),A=_t(h),P=ds(A),v=Qt(P),S=Ct(v),R=ts(S),T=Ws(R),_=qn(T,s?.extensions||[]);this.config=_,this.middlewareStack.use(ps(this.config)),this.middlewareStack.use(xt(this.config)),this.middlewareStack.use(ls(this.config)),this.middlewareStack.use(is(this.config)),this.middlewareStack.use(wt(this.config)),this.middlewareStack.use(Tt(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use($t(this.config,{httpAuthSchemeParametersProvider:$s,identityProviderConfigProvider:async(D)=>new kt({"aws.auth#sigv4":D.credentials,"aws.auth#sigv4a":D.credentials})})),this.middlewareStack.use(Ot(this.config))}destroy(){super.destroy()}}var dt=Lt(Us,"AWSSecurityTokenServiceV20110615","STSClient",ss),lt={},pt=(s,n,h,A)=>[];class se extends dt(lt,pt,"AssumeRole",ct){}class ne extends dt(lt,pt,"AssumeRoleWithWebIdentity",ut){}var Fn={AssumeRoleCommand:se,AssumeRoleWithWebIdentityCommand:ne};class me extends B{}Kt(Fn,me);var gt=(s)=>{if(typeof s?.Arn==="string"){let n=s.Arn.split(":");if(n.length>4&&n[4]!=="")return n[4]}return},ht=async(s,n,h,A={})=>{let P=typeof s==="function"?await s():s,v=typeof n==="function"?await n():n,S="",R=P??v??(S=await bt(A)());return h?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${P} (credential provider clientConfig)`,`${v} (contextual client)`,`${S} (STS default: AWS_REGION, profile region, or us-east-1)`),R},Ln=(s,n)=>{let h,A;return async(P,v)=>{if(A=P,!h){let{logger:D=s?.parentClientConfig?.logger,profile:W=s?.parentClientConfig?.profile,region:b,requestHandler:w=s?.parentClientConfig?.requestHandler,credentialProviderLogger:M,userAgentAppId:k=s?.parentClientConfig?.userAgentAppId}=s,oe=await ht(b,s?.parentClientConfig?.region,M,{logger:D,profile:W}),re=!mt(w);h=new n({...s,userAgentAppId:k,profile:W,credentialDefaultProvider:()=>async()=>A,region:oe,requestHandler:re?w:void 0,logger:D})}let{Credentials:S,AssumedRoleUser:R}=await h.send(new se(v));if(!S||!S.AccessKeyId||!S.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${v.RoleArn}`);let T=gt(R),_={accessKeyId:S.AccessKeyId,secretAccessKey:S.SecretAccessKey,sessionToken:S.SessionToken,expiration:S.Expiration,...S.CredentialScope&&{credentialScope:S.CredentialScope},...T&&{accountId:T}};return ce(_,"CREDENTIALS_STS_ASSUME_ROLE","i"),_}},Kn=(s,n)=>{let h;return async(A)=>{if(!h){let{logger:T=s?.parentClientConfig?.logger,profile:_=s?.parentClientConfig?.profile,region:D,requestHandler:W=s?.parentClientConfig?.requestHandler,credentialProviderLogger:b,userAgentAppId:w=s?.parentClientConfig?.userAgentAppId}=s,M=await ht(D,s?.parentClientConfig?.region,b,{logger:T,profile:_}),k=!mt(W);h=new n({...s,userAgentAppId:w,profile:_,region:M,requestHandler:k?W:void 0,logger:T})}let{Credentials:P,AssumedRoleUser:v}=await h.send(new ne(A));if(!P||!P.AccessKeyId||!P.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${A.RoleArn}`);let S=gt(v),R={accessKeyId:P.AccessKeyId,secretAccessKey:P.SecretAccessKey,sessionToken:P.SessionToken,expiration:P.Expiration,...P.CredentialScope&&{credentialScope:P.CredentialScope},...S&&{accountId:S}};if(S)ce(R,"RESOLVED_ACCOUNT_ID","T");return ce(R,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),R}},mt=(s)=>s?.metadata?.handlerProtocol==="h2",Pt=(s,n)=>{if(!n)return s;else return class extends s{constructor(A){super(A);for(let P of n)this.middlewareStack.use(P)}}},ft=(s={},n)=>Ln(s,Pt(B,n)),St=(s={},n)=>Kn(s,Pt(B,n)),Mn=(s)=>(n)=>s({roleAssumer:ft(n),roleAssumerWithWebIdentity:St(n),...n});var Vn=ct,zn=se,Bn=et,Qn=tt,Yn=ut,Xn=ne,Jn=st,Zn=nt,eo=ge,to=he,so=Q,no=Ve,oo=te,ro=ze,io=Z,ao=Be,co=ee,uo=Qe,lo=Y,po=Ye,go=X,ho=Xe,mo=ot,Po=rt,fo=J,So=Je,Ao=me,Eo=B,vo=x,yo=Ge,Io=it,Ro=Mn,_o=Ze,Co=ft,xo=St;export{jn as $Command,Gn as __Client,Vn as AssumeRole$,zn as AssumeRoleCommand,Bn as AssumeRoleRequest$,Qn as AssumeRoleResponse$,Yn as AssumeRoleWithWebIdentity$,Xn as AssumeRoleWithWebIdentityCommand,Jn as AssumeRoleWithWebIdentityRequest$,Zn as AssumeRoleWithWebIdentityResponse$,eo as AssumedRoleUser$,to as Credentials$,so as ExpiredTokenException,no as ExpiredTokenException$,oo as IDPCommunicationErrorException,ro as IDPCommunicationErrorException$,io as IDPRejectedClaimException,ao as IDPRejectedClaimException$,co as InvalidIdentityTokenException,uo as InvalidIdentityTokenException$,lo as MalformedPolicyDocumentException,po as MalformedPolicyDocumentException$,go as PackedPolicyTooLargeException,ho as PackedPolicyTooLargeException$,mo as PolicyDescriptorType$,Po as ProvidedContext$,fo as RegionDisabledException,So as RegionDisabledException$,Ao as STS,Eo as STSClient,vo as STSServiceException,yo as STSServiceException$,Io as Tag$,Ro as decorateDefaultCredentialProvider,_o as errorTypeRegistries,Co as getDefaultRoleAssumer,xo as getDefaultRoleAssumerWithWebIdentity};

package/bin/chunk-69dvjzwn.js

@@ -0,0 +1,3 @@
+// @bun
+import{A,e,r}from"./chunk-fy14v1v4.js";var T=A(e());var v=(t)=>Boolean(t)&&typeof t==="object"&&typeof t.AccessKeyId==="string"&&typeof t.SecretAccessKey==="string"&&typeof t.Token==="string"&&typeof t.Expiration==="string",g=(t)=>({accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:new Date(t.Expiration),...t.AccountId&&{accountId:t.AccountId}});var O=({maxRetries:t=0,timeout:o=1000})=>({maxRetries:t,timeout:o});var D=A(e());import L from"http";function I(t){return new Promise((o,s)=>{let n=L.request({method:"GET",...t,hostname:t.hostname?.replace(/^\[(.+)\]$/,"$1")});n.on("error",(a)=>{s(Object.assign(new D.ProviderError("Unable to connect to instance metadata service"),a)),n.destroy()}),n.on("timeout",()=>{s(new D.ProviderError("TimeoutError from instance metadata service")),n.destroy()}),n.on("response",(a)=>{let{statusCode:i=400}=a;if(i<200||300<=i)s(Object.assign(new D.ProviderError("Error response received from instance metadata service"),{statusCode:i})),n.destroy();let f=[];a.on("data",(c)=>{f.push(c)}),a.on("end",()=>{o(Buffer.concat(f)),n.destroy()})}),n.end()})}var u=(t,o)=>{let s=t();for(let n=0;n<o;n++)s=s.catch(t);return s};var N="AWS_CONTAINER_CREDENTIALS_FULL_URI",w="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",x="AWS_CONTAINER_AUTHORIZATION_TOKEN",Y=(t={})=>{let{timeout:o,maxRetries:s}=O(t);return()=>u(async()=>{let n=await Z({logger:t.logger}),a=JSON.parse(await j(o,n));if(!v(a))throw new T.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:t.logger});return g(a)},s)},j=async(t,o)=>{if(process.env[x])o.headers={...o.headers,Authorization:process.env[x]};return(await I({...o,timeout:t})).toString()},J="169.254.170.2",X=new Set(["localhost","127.0.0.1"]),z=new Set(["http:","https:"]),Z=async({logger:t})=>{if(process.env[w])return{hostname:J,path:process.env[w]};if(process.env[N]){let o;try{o=new URL(process.env[N])}catch{throw new T.CredentialsProviderError(`${process.env[N]} is not a valid container metadata service URL`,{tryNextLink:!1,logger:t})}if(!o.hostname||!X.has(o.hostname))throw new T.CredentialsProviderError(`${o.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:t});if(!o.protocol||!z.has(o.protocol))throw new T.CredentialsProviderError(`${o.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:t});return{protocol:o.protocol,hostname:o.hostname,path:o.pathname+o.search,port:o.port?parseInt(o.port,10):void 0}}throw new T.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${w} or ${N} environment variable is set`,{tryNextLink:!1,logger:t})};var C=A(e());var F=A(e());class M extends F.CredentialsProviderError{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(t,o=!0){super(t,o);this.tryNextLink=o,Object.setPrototypeOf(this,M.prototype)}}var R=A(e()),k=A(r());var h;(function(t){t.IPv4="http://169.254.169.254",t.IPv6="http://[fd00:ec2::254]"})(h||(h={}));var b={environmentVariableSelector:(t)=>t.AWS_EC2_METADATA_SERVICE_ENDPOINT,configFileSelector:(t)=>t.ec2_metadata_service_endpoint,default:void 0};var m;(function(t){t.IPv4="IPv4",t.IPv6="IPv6"})(m||(m={}));var Q="AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE",ee="ec2_metadata_service_endpoint_mode",V={environmentVariableSelector:(t)=>t[Q],configFileSelector:(t)=>t[ee],default:m.IPv4};var U=async()=>k.parseUrl(await te()||await oe()),te=async()=>R.loadConfig(b)(),oe=async()=>{let t=await R.loadConfig(V)();switch(t){case m.IPv4:return h.IPv4;case m.IPv6:return h.IPv6;default:throw Error(`Unsupported endpoint mode: ${t}. Select from ${Object.values(m)}`)}};var y=(t,o)=>{let s=300+Math.floor(Math.random()*300),n=new Date(Date.now()+s*1000);o.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(n)}.
+For more information, please visit: https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html`);let a=t.originalExpiration??t.expiration;return{...t,...a?{originalExpiration:a}:{},expiration:n}};var W=(t,o={})=>{let s=o?.logger||console,n;return async()=>{let a;try{if(a=await t(),a.expiration&&a.expiration.getTime()<Date.now())a=y(a,s)}catch(i){if(n)s.warn("Credential renew failed: ",i),a=y(n,s);else throw i}return n=a,a}};var G="/latest/meta-data/iam/security-credentials/",re="/latest/api/token",P="AWS_EC2_METADATA_V1_DISABLED",K="ec2_metadata_v1_disabled",B="x-aws-ec2-metadata-token",ne=(t={})=>W(ae(t),{logger:t.logger}),ae=(t={})=>{let o=!1,{logger:s,profile:n}=t,{timeout:a,maxRetries:i}=O(t),f=async(c,E)=>{if(o||E.headers?.[B]==null){let d=!1,l=!1,q=await C.loadConfig({environmentVariableSelector:(p)=>{let _=p[P];if(l=!!_&&_!=="false",_===void 0)throw new C.CredentialsProviderError(`${P} not set in env, checking config file next.`,{logger:t.logger});return l},configFileSelector:(p)=>{let _=p[K];return d=!!_&&_!=="false",d},default:!1},{profile:n})();if(t.ec2MetadataV1Disabled||q){let p=[];if(t.ec2MetadataV1Disabled)p.push("credential provider initialization (runtime option ec2MetadataV1Disabled)");if(d)p.push(`config file profile (${K})`);if(l)p.push(`process environment variable (${P})`);throw new M(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${p.join(", ")}].`)}}let H=(await u(async()=>{let d;try{d=await ie(E)}catch(l){if(l.statusCode===401)o=!1;throw l}return d},c)).trim();return u(async()=>{let d;try{d=await ce(H,E,t)}catch(l){if(l.statusCode===401)o=!1;throw l}return d},c)};return async()=>{let c=await U();if(o)return s?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),f(i,{...c,timeout:a});else{let E;try{E=(await se({...c,timeout:a})).toString()}catch(S){if(S?.statusCode===400)throw Object.assign(S,{message:"EC2 Metadata token request returned error"});else if(S.message==="TimeoutError"||[403,404,405].includes(S.statusCode))o=!0;return s?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),f(i,{...c,timeout:a})}return f(i,{...c,headers:{[B]:E},timeout:a})}}},se=async(t)=>I({...t,path:re,method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),ie=async(t)=>(await I({...t,path:G})).toString(),ce=async(t,o,s)=>{let n=JSON.parse((await I({...o,path:G+t})).toString());if(!v(n))throw new C.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:s.logger});return g(n)};export{N as ENV_CMDS_FULL_URI,w as ENV_CMDS_RELATIVE_URI,Y as fromContainerMetadata,ne as fromInstanceMetadata};

package/bin/chunk-atg5v831.js

@@ -0,0 +1,2 @@
+// @bun
+import{A,e,t}from"./chunk-fy14v1v4.js";var f=A(t()),i=A(e());import{readFileSync as S}from"fs";var a=(o)=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:r,roleSessionName:n,webIdentityToken:c,providerId:s,policyArns:g,policy:E,durationSeconds:p}=o,{roleAssumerWithWebIdentity:d}=o;if(!d){let{getDefaultRoleAssumerWithWebIdentity:_}=await import("./chunk-4yv0xe5h.js");d=_({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...l?.callerClientConfig,...o.parentClientConfig}},o.clientPlugins)}return d({RoleArn:r,RoleSessionName:n??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:c,ProviderId:s,PolicyArns:g,Policy:E,DurationSeconds:p})};var m="AWS_WEB_IDENTITY_TOKEN_FILE",T="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",I=(o={})=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let r=o?.webIdentityTokenFile??process.env[m],n=o?.roleArn??process.env[T],c=o?.roleSessionName??process.env[N];if(!r||!n)throw new i.CredentialsProviderError("Web identity configuration not specified",{logger:o.logger});let s=await a({...o,webIdentityToken:i.externalDataInterceptor?.getTokenRecord?.()[r]??S(r,{encoding:"ascii"}),roleArn:n,roleSessionName:c})(l);if(r===process.env[m])f.setCredentialFeature(s,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return s};export{I as fromTokenFile};

package/bin/chunk-bd555g42.js

@@ -0,0 +1,2 @@
+// @bun
+import{A,e,t}from"./chunk-fy14v1v4.js";var _=A(e());var B=A(e());var C=A(t()),f=A(e());var S=A(t()),u=A(e()),v=(r,n,o)=>{let s={EcsContainer:async(a)=>{let{fromHttp:c}=await import("./chunk-2dm2ka6t.js"),{fromContainerMetadata:i}=await import("./chunk-69dvjzwn.js");return o?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>u.chain(c(a??{}),i(a))().then(p)},Ec2InstanceMetadata:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:c}=await import("./chunk-69dvjzwn.js");return async()=>c(a)().then(p)},Environment:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:c}=await import("./chunk-c8cevptj.js");return async()=>c(a)().then(p)}};if(r in s)return s[r];else throw new u.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${r}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:o})},p=(r)=>S.setCredentialFeature(r,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p");var R=(r,{profile:n="default",logger:o}={})=>Boolean(r)&&typeof r==="object"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1&&["undefined","string"].indexOf(typeof r.external_id)>-1&&["undefined","string"].indexOf(typeof r.mfa_serial)>-1&&(q(r,{profile:n,logger:o})||H(r,{profile:n,logger:o})),q=(r,{profile:n,logger:o})=>{let s=typeof r.source_profile==="string"&&typeof r.credential_source>"u";if(s)o?.debug?.(`    ${n} isAssumeRoleWithSourceProfile source_profile=${r.source_profile}`);return s},H=(r,{profile:n,logger:o})=>{let s=typeof r.credential_source==="string"&&typeof r.source_profile>"u";if(s)o?.debug?.(`    ${n} isCredentialSourceProfile credential_source=${r.credential_source}`);return s},L=async(r,n,o,s,a={},c)=>{o.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let i=n[r],{source_profile:l,region:K}=i;if(!o.roleAssumer){let{getDefaultRoleAssumer:d}=await import("./chunk-4yv0xe5h.js");o.roleAssumer=d({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...s,...o?.parentClientConfig,region:K??o?.parentClientConfig?.region??s?.region}},o.clientPlugins)}if(l&&l in a)throw new f.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${f.getProfileName(o)}. Profiles visited: `+Object.keys(a).join(", "),{logger:o.logger});o.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${l?`source_profile=[${l}]`:`profile=[${r}]`}`);let P=l?c(l,n,o,s,{...a,[l]:!0},I(n[l]??{})):(await v(i.credential_source,r,o.logger)(o))();if(I(i))return P.then((d)=>C.setCredentialFeature(d,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let d={RoleArn:i.role_arn,RoleSessionName:i.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:i.external_id,DurationSeconds:parseInt(i.duration_seconds||"3600",10)},{mfa_serial:m}=i;if(m){if(!o.mfaCodeProvider)throw new f.CredentialsProviderError(`Profile ${r} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:o.logger,tryNextLink:!1});d.SerialNumber=m,d.TokenCode=await o.mfaCodeProvider(m)}let G=await P;return o.roleAssumer(G,d).then((U)=>C.setCredentialFeature(U,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},I=(r)=>!r.role_arn&&!!r.credential_source;var O=A(t()),b=(r)=>Boolean(r&&r.login_session),x=async(r,n,o)=>{let{fromLoginCredentials:s}=await import("./chunk-r2ct68mr.js"),a=await s({...n,profile:r})({callerClientConfig:o});return O.setCredentialFeature(a,"CREDENTIALS_PROFILE_LOGIN","AC")};var k=A(t()),F=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.credential_process==="string",h=async(r,n)=>{let{fromProcess:o}=await import("./chunk-sh6e8wpr.js"),s=await o({...r,profile:n})();return k.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v")};var y=A(t()),D=async(r,n,o={},s)=>{let{fromSSO:a}=await import("./chunk-h57szxpw.js");return a({profile:r,logger:o.logger,parentClientConfig:o.parentClientConfig,clientConfig:o.clientConfig})({callerClientConfig:s}).then((c)=>{if(n.sso_session)return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO","r");else return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},T=(r)=>r&&(typeof r.sso_start_url==="string"||typeof r.sso_account_id==="string"||typeof r.sso_session==="string"||typeof r.sso_region==="string"||typeof r.sso_role_name==="string");var W=A(t()),g=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.aws_access_key_id==="string"&&typeof r.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof r.aws_session_token)>-1&&["undefined","string"].indexOf(typeof r.aws_account_id)>-1,w=async(r,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let o={accessKeyId:r.aws_access_key_id,secretAccessKey:r.aws_secret_access_key,sessionToken:r.aws_session_token,...r.aws_credential_scope&&{credentialScope:r.aws_credential_scope},...r.aws_account_id&&{accountId:r.aws_account_id}};return W.setCredentialFeature(o,"CREDENTIALS_PROFILE","n")};var N=A(t()),j=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.web_identity_token_file==="string"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1,M=async(r,n,o)=>{let{fromTokenFile:s}=await import("./chunk-atg5v831.js"),a=await s({webIdentityTokenFile:r.web_identity_token_file,roleArn:r.role_arn,roleSessionName:r.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:o});return N.setCredentialFeature(a,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")};var E=async(r,n,o,s,a={},c=!1)=>{let i=n[r];if(Object.keys(a).length>0&&g(i))return w(i,o);if(c||R(i,{profile:r,logger:o.logger}))return L(r,n,o,s,a,E);if(g(i))return w(i,o);if(j(i))return M(i,o,s);if(F(i))return h(o,r);if(T(i))return await D(r,i,o,s);if(b(i))return x(r,o,s);throw new B.CredentialsProviderError(`Could not resolve credentials using profile: [${r}] in configuration/credentials file(s).`,{logger:o.logger})};var V=(r={})=>async({callerClientConfig:n}={})=>{r.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let o=await _.parseKnownFiles(r);return E(_.getProfileName({profile:r.profile??n?.profile}),o,r,n)};export{V as fromIni};

package/bin/chunk-c8cevptj.js

@@ -0,0 +1,2 @@
+// @bun
+import{f,I,h}from"./chunk-fy14v1v4.js";export{f as ENV_KEY,I as ENV_SECRET,h as fromEnv};